Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/F2LdL7ybzfzPSt5t-b18q089jwo.roa
File: F2LdL7ybzfzPSt5t-b18q089jwo.roa (raw, json)
Hash identifier: pV75yd4KSNaebS2IQ3XosafJetvCzED1fB/NU7nhrkc=
Subject key identifier: 17:62:DD:2F:BC:9B:CD:FC:CF:4A:DE:6D:F9:BD:7C:AB:4F:3D:8F:0A
Certificate issuer: /CN=ba0d738dd28ff2549456ce66e744898372fc503d
Certificate serial: 0199C432F74D3BC3793983FFC8B3BE5241A4
Authority key identifier: BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/F2LdL7ybzfzPSt5t-b18q089jwo.roa
Signing time: Wed 08 Oct 2025 14:21:38 +0000
ROA not before: Wed 08 Oct 2025 14:21:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31229
IP address blocks: 5.149.160.0/21 maxlen: 21
5.149.165.0/24 maxlen: 24
46.245.192.0/22 maxlen: 22
46.245.192.0/24 maxlen: 24
46.245.193.0/24 maxlen: 24
46.245.194.0/24 maxlen: 24
46.245.195.0/24 maxlen: 24
46.245.196.0/22 maxlen: 22
91.102.112.0/21 maxlen: 21
92.43.112.0/21 maxlen: 21
109.205.48.0/21 maxlen: 21
109.205.55.0/24 maxlen: 24
178.216.200.0/21 maxlen: 21
185.23.20.0/22 maxlen: 22
185.23.20.0/24 maxlen: 24
185.23.21.0/24 maxlen: 24
185.23.22.0/24 maxlen: 24
185.23.23.0/24 maxlen: 24
185.49.148.0/23 maxlen: 23
185.49.150.0/23 maxlen: 23
185.66.120.0/22 maxlen: 24
193.29.205.0/24 maxlen: 24
193.187.64.0/24 maxlen: 24
193.187.66.0/23 maxlen: 23
193.187.68.0/23 maxlen: 23
193.187.70.0/24 maxlen: 24
193.187.71.0/24 maxlen: 24
194.50.186.0/24 maxlen: 24
2001:67c:6c8::/48 maxlen: 48
2a02:950::/32 maxlen: 32
2a02:951::/32 maxlen: 32
2a02:952::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:32:f7:4d:3b:c3:79:39:83:ff:c8:b3:be:52:41:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0d738dd28ff2549456ce66e744898372fc503d
Validity
Not Before: Oct 8 14:21:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1762dd2fbc9bcdfccf4ade6df9bd7cab4f3d8f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:41:e7:06:42:ce:3d:3b:f2:57:b7:2a:a6:67:
b8:88:52:5f:35:f9:47:56:0f:83:cb:be:75:d5:ad:
95:2f:06:94:71:1b:34:92:f1:64:ed:59:2b:16:9b:
57:4d:1d:05:52:a9:6b:f5:f6:65:cd:d4:69:a4:c4:
d9:cc:b1:41:51:6e:ae:7f:fc:3d:8d:d5:47:34:55:
d6:2d:d1:13:da:62:77:d9:d1:8c:e6:cb:d5:59:b9:
42:0a:33:c6:3b:d0:f1:71:22:08:44:59:c6:ad:7d:
7a:a5:68:cd:ab:04:89:c5:35:88:bc:00:3a:87:cf:
3c:cc:bd:03:be:e4:a3:62:71:75:ed:db:96:c4:f3:
ed:af:46:8c:70:ec:53:44:77:59:b8:70:f7:d6:e0:
93:3b:02:d5:cf:d1:48:d4:42:97:40:4b:52:02:54:
d1:a8:8f:a3:a5:13:9f:05:71:5b:fb:5d:10:ee:dd:
4e:fc:f8:52:e9:fe:2c:78:44:ea:92:07:3c:df:a1:
bf:21:ac:cf:c0:1c:f0:85:e2:5e:65:46:de:fd:1f:
56:bc:5b:e1:08:94:40:4f:69:ed:b2:5c:94:e1:e2:
52:6a:d8:c9:96:83:1b:5b:81:79:cf:f8:bf:86:f6:
e9:59:8f:64:45:47:99:ca:1e:5f:08:35:cc:e9:a9:
46:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:62:DD:2F:BC:9B:CD:FC:CF:4A:DE:6D:F9:BD:7C:AB:4F:3D:8F:0A
X509v3 Authority Key Identifier:
keyid:BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/F2LdL7ybzfzPSt5t-b18q089jwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.160.0/21
46.245.192.0/21
91.102.112.0/21
92.43.112.0/21
109.205.48.0/21
178.216.200.0/21
185.23.20.0/22
185.49.148.0/22
185.66.120.0/22
193.29.205.0/24
193.187.64.0/24
193.187.66.0-193.187.71.255
194.50.186.0/24
IPv6:
2001:67c:6c8::/48
2a02:950::-2a02:952:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2a:ea:ba:1c:3e:6c:ac:6e:0e:81:a7:e7:82:f0:f2:13:58:12:
53:89:09:6e:42:b8:26:f2:5b:54:01:42:e9:0e:ab:a9:45:4d:
57:50:6f:b0:e4:44:a5:41:6c:92:81:21:60:7a:ce:35:f7:68:
85:19:ac:96:73:24:84:3a:9b:bd:78:9e:90:01:0b:d5:c1:c3:
e3:3b:e7:81:e0:50:83:05:b5:41:a6:a3:98:49:55:b8:9d:aa:
bd:ff:73:0a:10:dc:63:28:99:4b:b1:f8:ca:41:04:50:65:5a:
a4:c2:85:db:1f:6b:88:91:27:47:52:18:c8:fc:78:d1:ec:36:
f0:8f:ab:a2:e7:80:e7:3d:9d:62:37:e6:9a:fe:6e:db:ce:0c:
c3:95:56:c5:e7:17:30:c4:38:1f:f7:09:ae:7f:cb:35:f7:11:
3c:38:1e:ef:47:e0:bd:0d:8b:a4:eb:34:67:1f:18:d9:ce:df:
7e:e2:f1:26:d0:10:94:87:74:dd:15:73:30:a1:9b:ec:54:cf:
48:39:df:20:70:b9:60:46:2f:77:5a:d8:d1:ff:06:e6:ec:74:
8b:69:dc:4b:e5:bf:c4:cc:f5:25:8c:0f:f9:42:70:8c:0c:ea:
9c:17:89:0c:f3:e1:c7:e9:6c:52:2e:72:27:fd:10:d1:99:85:
e6:78:97:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:55:45 2025 by rpki-client